1. Who is responsible
Consennse GmbH, Ringwilerstrasse 4, 8620 Wetzikon ZH, Switzerland, is responsible for processing your personal data. For privacy questions, write to info@consennse.com.
2. When you visit our website
Our hosting provider Vercel Inc. (USA) automatically records technical data each time you open a page: IP address, date and time, pages visited, referring page, browser and operating system. We need this data to deliver the website, keep it secure and fix errors. We also use Vercel's bot detection to protect our forms from abuse (our legitimate interest). Log files are deleted after 30 days unless needed to investigate an incident.
3. When you contact us
When you write to us by email or through the contact form, message us on WhatsApp or ask for a call, we process the details you give us, such as your name, email address and message. The contact form also records the page you sent it from and your language. Providing your name, email address and message is required so we can answer; without them we cannot process your request. We use this only to answer your request and, if you wish, to prepare an offer. Calls take place via Microsoft Teams.
Form submissions are passed on by Zapier, Inc. (USA), an automation service, to our email system (Microsoft Outlook, Microsoft Corporation, USA/EU). Zapier processes them on our behalf.
4. Newsletter
You can subscribe to our newsletter with your email address in the website footer. Sign-ups are first passed via Zapier to our email system (Microsoft Outlook) before we add them to Mailchimp. We keep your email address until you unsubscribe. We send it only with your consent, which you confirm via a link in a confirmation email (double opt-in). You can unsubscribe at any time via the link in every newsletter. We add you to our mailing list manually and send the newsletter with Mailchimp (The Rocket Science Group LLC, USA), which also sends the confirmation email. We measure opens and clicks to improve the newsletter.
5. Cookies and analytics
The website stores your cookie choice in your browser's local storage. This is the only thing it needs to work. Google Tag Manager loads on every visit, but in a restricted mode: until you agree in the cookie banner, no analytics cookies are set and no analytics data is stored. Because Google Tag Manager is loaded, your browser connects to Google servers and your IP address reaches Google, as with any connection to a third-party server.
If you agree, we also use Google Analytics 4, a service of Google Ireland Ltd. and Google LLC (USA). It helps us understand how the website is used, for example which pages are visited and how visitors find us. Google Analytics 4 does not log or store IP addresses. Google may process data in the USA; Google LLC is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework. Analytics data is kept for 14 months. You can change or withdraw your consent at any time via Cookie settings in the footer. Withdrawal does not affect processing before it.
6. Fonts
Our fonts are hosted on our own server. No data is sent to font providers when you visit the website.
7. Clients and prospects
When you become a client or show interest in our services, we keep your business contact details and our exchanges in our email system (Microsoft Outlook). We use them to deliver our services, look after the relationship and meet legal obligations, such as keeping accounting records.
8. Testimonials and case studies
Where we publish a client's feedback or case study with a person's name, role or photo, we do so only with that person's consent. You can withdraw it at any time and we will remove the details from the website.
9. Who receives your data
We share personal data only with service providers who help us run the website and our business, for example Vercel (hosting), Zapier (form handling), Microsoft (email and Teams video calls), Mailchimp (newsletter) and Google (analytics). They process the data on our behalf and under our instructions. We do not sell your data. We disclose data to authorities only when the law requires it.
10. Transfers abroad
Our service providers may process data outside Switzerland, namely in the USA and countries of the EU/EEA. We transfer data only to countries with an adequate level of data protection, to providers certified under the Swiss-U.S. or EU-U.S. Data Privacy Framework, or on the basis of the standard contractual clauses approved by the European Commission and recognised by the Swiss FDPIC.
11. How long we keep data
We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires. Contact requests that do not lead to a business relationship are deleted after 12 months. Accounting records are kept for 10 years under Swiss law.
12. Legal basis (GDPR)
If the GDPR applies, we rely on these legal bases: performance of a contract or steps before a contract (Art. 6 para. 1 lit. b), our legitimate interest in running a secure website, answering enquiries and looking after client relationships (Art. 6 para. 1 lit. f), your consent for analytics, the newsletter and testimonials (Art. 6 para. 1 lit. a), and legal obligations (Art. 6 para. 1 lit. c).
13. Your rights
You can ask us whether we process your personal data and request access to it, correction, deletion, restriction of processing or a copy in a common format. You can object to processing and withdraw consent at any time, with effect for the future. To use these rights, contact us at the address in section 1.
Right to object. You can object at any time to processing based on our legitimate interest, for reasons arising from your particular situation. You can also object to direct marketing, such as our newsletter, at any time without giving reasons.
You can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch). If you live in the EU/EEA, you can also contact the data protection authority in your country.
14. No automated decision-making
We do not use automated decision-making or profiling.
15. Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS) and restricted access.
16. Changes
We may update this privacy policy when our website or services change. The version published on this page applies.
Last updated: 3 November 2026
